Decagon and Instinct open-source the PACT trust protocol for personal assistants
Built on Agent2Agent and OAuth 2.0, the PACT protocol separates agent verification from user consent so businesses can confirm who an assistant represents and what the customer authorized.
Today, we’re open-sourcing the Personal Agent Consent & Trust (PACT) Protocol at @DecagonAI, co-developed and supported by @Instinct. We’re also joining the Personal Agent Protocol working group announced by the team behind @Muse to help shape an industry standard. Personal agents book, cancel, and negotiate for consumers. Treat them as a new kind of customer: give them a clear front door where your business sets the policies and verifies who they represent and what the customer authorized. That’s why we built PACT. It builds on Agent2Agent and OAuth 2.0 to make integration easier, using standards developers already know. It separates agent verification from customer consent. Businesses define the permissions, and customers sign in directly with the business to explicitly grant them. For sensitive actions like purchases and account cancellations, the business verifies that the customer granted the agent permission before proceeding. The customer chooses who acts for them. The business sets the terms.